I think compliance makes you a bit more secure as it forces you to have certain things in place. The problem here is that security is a mindset; you need to want to have security if you are going to be secure. Often companies are just going through the motions to have the compliance box checked and don't necessarily want to have a high level of security.
↧